Distillation of continuous- variable entanglement with optical means 



J. Eisert 1 2 , D.E. Browne 2 , S. Scheel 2 , and M.B. Plenio 2 

Institutfttr Physik, Universitdt Potsdam, Am Neuen Palais 10, D-14469 Potsdam, Germany 
QOLS, Blackett Laboratory, Imperial College London, Prince Consort Road, London SW7 2BW, UK 

(Dated: February 1, 2008) 

We present an event-ready procedure that is capable of distilling Gaussian two-mode entangled states from 
a supply of weakly entangled states that have become mixed in a decoherence process. This procedure relies 
on passive optical elements and photon detectors distinguishing the presence and the absence of photons, but 
does not make use of photon counters. We identify fixed points of the iteration map, and discuss in detail 
its convergence properties. Necessary and sufficient criteria for the convergence to two-mode Gaussian states 
are presented. On the basis of various examples we discuss the performance of the procedure as far as the 
increase of the degree of entanglement and two-mode squeezing is concerned. Finally, we consider imperfect 
operations and outline the robustness of the scheme under non-unit detection efficiencies of the detectors. This 
analysis implies that the proposed protocol can be implemented with currently available technology and detector 
efficiencies. 
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I. INTRODUCTION 

The key requirement in essentially all practical applications 
of quantum information science is to protect the coherence 
of quantum states against decoherence induced by the uncon- 
trolled influences of an environment. Entangled states of com- 
posite quantum systems, in particular, deteriorate typically 
into mixed quantum states with mere classical correlations. 
Decoherence accompanies to some extent any attempt to dis- 
tribute entangled states that have been prepared using some 
local interaction. The first obvious strategy to minimize this 
effect is to try to reduce the interaction with the environment, 
e.g., by using glass fibers with a long characteristic absorption 
length when distributing photonic entanglement. 

This strategy is, however, not enough in many cases. If one 
intends to share entanglement over arbitrary distances, entan- 
glement must in some way be extracted out of the only weakly 
entangled quantum systems. Under the key word entangle- 
ment distillation such strategies have been developed most 
notably the iterative distillation schemes that work for spin- 
1/2 or qubit systems. In such schemes, entanglement is dis- 
tilled out of a supply of weakly entangled pairs of quantum 
systems by means of local operations and classical commu- 
nication. Such protocols have been proposed as theoretical 
concepts!!]], and discussed under the assumption of imperfect 
devices y|]- They form the basis of the theoretical concept of 
the distillable entanglement yb, which clarifies the notion of 
entanglement as a resource. All the proposed protocols share 
nevertheless one property: they are experimentally very dif- 
ficult to implement. First steps towards the full experimental 
realization of a distillation scheme very recently been taken 
01, based on earlier theoretical work on optical distillation 
protocols in the finite-dimensional setting 0]. However, it 
seems fair to say that the practical realization of full-scale en- 
tanglement distillation remains one of the key challenges of 
the field. 

In this paper we present a feasible alternative to entangle- 
ment distillation in the finite-dimensional setting. We present 
a procedure that is capable of entanglement distillation and 



purification employing systems with canonical coordinates, 
or so-called continuous-variable systems such as light modes 
or harmonic oscillator systems. The scheme that we present 
is as such an extension of the Gaussification scheme of Ref. 
0. In this paper, we investigate the power of this proce- 
dure to distill states that have become mixed as a result of 
a decoherence process 0]. More specifically, we investigate 
whether Gaussian states that originate for example from two- 
mode squeezed states I8l 1^. flOt flltl that underwent a decoher- 
ence process can be transformed back into highly entangled 
Gaussians using feasible local operations and classical com- 
munication only. 

The result that, highly entangled and often even pure Gaus- 
sian states can be extracted from a supply of weakly entangled 
mixed states, appears to be in strong contrast to the no-go- 
theorems concerning the distillation of Gaussian states with 
Gaussian operations However, the central idea 

is to leave the Gaussian setting in a first preparation step, and 
only in the course of the iteration the resulting states converge 
towards a final Gaussian state. In this sense one can sneak 
through a loophole left open by the statements demonstrating 
the impossibility of entanglement distillation when staying 
entirely within the Gaussian setting. It has been shown that 
the general use of non-Gaussian operations allow for entan- 
glement purification fiHl . However, it should be noted that the 
scheme presented here endeavors to employ non-Gaussian op- 
erations in a minimal way, namely only in the first step. Also, 
merely detectors are required that distinguish the presence 
and absence of photons. The resulting procedure yields fi- 
nally the desired output: the states are approximately (i) pure, 
(ii) Gaussian, and (iii) highly entangled. As such, this proto- 
col could serve as a quantum privacy amplification protocol 
in continuous-variable entanglement-based quantum 

key distribution. Needless to say, privacy amplification to pure 
states is only possible in case of an error-free implementation 
of the required steps. In any practical realization, this is of 
course not possible. One of the crucial numbers specifying to 
what extent the procedure can achieve pure final states is the 
detection efficiency of the used photon detectors. Yet, the pu- 
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rity of the final states is no necessary requirement for quantum 
privacy amplification to function. 

It should be noted that this procedure may well have 
significant advantages compared to schemes in the finite- 
dimensional setting, even when one is indifferent to whether 
the resulting states are entangled in polarization or continu- 
ous degrees of freedom, and is only interested in some form 
of highly entangled states of light. The procedure is event- 
ready, in the sense that one has a classical signal at hand in- 
dicating success, and in principle, one can use the resulting 
states on the basis of this measurement. Photon counters, or 
set-ups where the photon number can be inferred in retrospect 
from the outcomes of measurements on all modes including 
the output modes, as well as controlled-not operations are not 
required. Also, no post-processing is necessary dependent on 
the measurement outcomes, which constitutes an advantage 
in iterative protocols where the output of one step is the input 
of the next step. But in turn, the final state that one obtains 
can obviously not be the same maximally entangled state for 
all inputs, as for finite-dimensional procedures this is often 
the case, one reason being that the maximally entangled state 
does not even exist in state space. There is no measure of the 
quality of the output available as the fidelity with respect to a 
maximally entangled state. 

We have decided to split our analysis into several parts, in 
a hierarchy of abstraction versus practicability: Following the 
introduction of the procedure in Section [D] we will investi- 
gate the power of the procedure in abstract terms. SectionllTll 
will be dedicated to this analysis, where we will assume the 
applied quantum operations to be error-free. The procedure 
can be conceived as the continuous-variable analogue of the 
finite-dimensional quantum privacy amplification procedure 
id. We will present statements identifying the fixed points 
of the iteration map: we will find that exactly the Gaussians 
centred in phase space form the set of fixed points. We will 
investigate convergence properties, and in particular present 
necessary and sufficient criteria for convergence to a pure en- 
tangled Gaussian state. The proofs - some of them are techni- 
cally involved - will be presented in a self-contained section 
in the Appendix. The degree of entanglement and two-mode 
squeezing properties of the output will be investigated in great 
detail, and several examples will be discussed. 

Section llVl is concerned with the non-Gaussian preparatory 
step in the absence and presence of decoherence. This step 
also relies only on photon detectors and passive linear op- 
tics. In Section [V] we will then discuss the situation when 
the performed operations are not noiseless. The most relevant 
parameter here is the detection efficiency of the photon detec- 
tors. We will present the iteration map, and will investigate 
by numerical means what output states should be expected 
asymptotically after many iteration steps. In an experiment 
that realizes, say, a single step of the distillation procedure, 
further sources of imperfection play a role. This is the third 
part of the analysis. These additional imperfections, includ- 
ing dark counts of the detectors and mode matching issues 
will be sketched at the end of Section[V]and will be discussed 
in great detail in a forthcoming publication. Also, the quan- 
tum privacy amplification capabilities in the presence of noisy 



apparata will be discussed elsewhere. The present paper con- 
centrates to a large extent to flesh out what can be achieved in 
an asymptotic setting, or in a protocol where many steps can 
be implemented: as such it shows that continuous variable en- 
tanglement can be distilled, even when resorting to the most 
feasible class of operations. For imperfect detectors, yet, it is 
shown that even after a small number of steps and for fairly 
low detection efficiencies, the degree of entanglement can be 
significantly increased. Finally, in Section IVT1 we summarise 
what we have achieved, and sketch what further steps could 
be taken towards the implementation of continuous-variable 
distillation schemes with continuous variables. 



II. THE PROCEDURE 

The procedure makes use of only beam splitters and photon 
detectors distinguishing the presence and absence of photons. 
The iteration amounts to a very elementary operation, and 
it will only turn out to be technical to characterize its prop- 
erties concerning convergence. From a supply of two-mode 
squeezed states, one prepares two-mode states p in a first step. 
The state p is assumed to be non-Gaussian in the sense that 
its associated characteristic function or Wigner function is not 
a Gaussian in phase space. This step can be conceived as the 
preparatory part, this preparation will be discussed in more 
detail in Section[v] Pairs p ® p of such non-Gaussian states p 
are then mixed at a 50 : 50 beam splitter, yielding a state 

(U®U)(p®p)(U® U)\ (1) 

where the beam splitters are reflected by unitaries fl8ll 

where we set T = R = l/v2- Two of the output modes 
are then directed into a photon detector, whose action is each 
associated with Kraus operators 

Ex = |0}(0|, E 2 = 1 - |0}(0|, (3) 

where |0) denotes the state vector associated with the vacuum 
state. Note that the first operator is a Gaussian projector and 
the second merely the difference of two Gaussian operators, 
which is a very simple non-Gaussian operation indeed. 

The state is kept in case of the vacuum outcome of both 
local detectors. The procedure is the Gaussification procedure 
of Ref. 0], but now the input states are not necessarily pure 
states. The unnormalized final state after one step is given by 

(0, Q\{U ® U)(p <g> p)(U ®U)*\0,0). (4) 

The resulting two-mode states then form the basis of the next 
step. It is an iterative protocol, and it is event-ready, in the 
sense that one has a classical signal at hand which indicates 
whether the procedure was successful or not. No further post- 
processing has to be performed. The Gaussification procedure 
is depicted in Fig.^ 
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FIG. 1: A single step of the protocol: two non-Gaussian states are 
mixed at a 50 : 50 beam splitter. Two of the output modes are fed 
into photon detectors, the remaining two modes are kept in further 
steps, given a vacuum outcome in the detectors. 



m. PERFECT DEVICES 

In this section we investigate the ideal situation where all 
operations can be implemented to perfect accuracy. In partic- 
ular, perfect detection efficiencies are assumed, but later, this 
assumption will be relaxed. We first discuss the recurrence 
relation of the states, and then identify all fixed points of the 
map. We then investigate convergence, and give a necessary 
and sufficient criterion for convergence to a pure Gaussian 
two-mode state. Note that the general situation that we en- 
counter here is different from the finite-dimensional setting. 
In the latter case, the fidelity with respect to a maximally en- 
tangled state is a meaningful measure of the quality of the out- 
put, for example the fidelity with respect to the singlet state 
of two qubits. Here, no such maximally entangled state ex- 
ists, and consequently, the degree of squeezing, of entangle- 
ment, and the von-Neumann entropy characterizing purity are 
unbounded. Hence, a more complicated interplay should be 
expected. We state the quality of the output in terms of the 
degree of entanglement and squeezing of the output. 



A. The iteration map 

The iteration map takes as input a four-mode state, and has 
a two-mode state as output, which corresponds to the result- 
ing state after the measurement, given that both measurement 
outcomes were appropriate. Let uj be a four-mode state; the 
iteration map £ is then defined as 



£{u) = (o,o|(Z7® u)u{u® uy \0,0). 



(5) 



The output of one step is the input of the next step, which 
gives rise to a sequence of states representing the output after 
a number of steps. The map that links one state with the sub- 
sequent one - given a positive outcome of the measurements 
- will be referred to as recursion relation. 

The recursion relation can be stated in a transparent way 
as follows. The two-mode state p can be represented in the 
number basis {|n) : n G N} as 



P = X] Ps,t;n,m\s,t)(r 



(6) 



The output p' = £(p ® p) can then be written as 

P's.t-,n, m \ s i t ) (n,m\, 



E 



(7) 



where 



s,t,n,m— 



P'a.b-.cd ~ X X X ^a,b;c,c 
s=0 t=0 n=0 m=0 

* Ps,t;n,mPa—s,b—t;c—n,d—i 



(8) 



The coefficients M* Vl" 'J 1 are given by 



M 



a,b:c.d 



_ 2-(a+fe+c+d)/2/_-|\(a+6+c+d)-( 



1/2 



(9) 



Note that each number p' a b . c d for some a, b, c, d e N is a 
polynomial in p s ,t;n.m for s < a, t < b, n < c, and m < d 
only. This is a quite helpful property as it implies that changes 
of coefficients associated with certain Fock numbers depend 
only on coefficients associated with smaller Fock numbers. 
This property will prove to be crucial in the formal proofs of 
convergence that are presented later on in this paper. 



B. Fixed points of the map 

The first task is to identify the fixed points of the iteration 
map: these are the states that are left unchanged under the 
operation. With fixed point we mean two-mode states p for 
which there exists ace (0, 1] such that 



p = c £(p (g> p). 



(10) 



The number c reflects the fact that we do not require the output 
to be the appropriate one with unit probability. Some fixed 
points can easily be found. These are all two-mode Gaussian 
states with vanishing first moments. That this set of Gaussian 
states qualifies as being a set of fixed points becomes obvious 
in terms of the covariance matrices. 

This can be formulated as follows. For a general n-mode 
system, let R = (Xi, Pi, ... , X n , P n ) be the vector consist- 
ing of the canonical coordinates of an n-mode system (only 
two and four-mode systems will be relevant). The canonical 
commutation relations (CCR) [Rj, Rk] = i^j,k for j, k = 
1, . . . , 2n give rise to the symplectic matrix 



i=i 



1 

-1 



(ID 



If the second moments exist, then the covariance matrix 7 
fl^l . a real symmetric 2n x 2n-matrix, is defined as 

7j , fe = 2Re (Tr^ - Tr[R jP \)(R k - Tv[R k p])p]) . (12) 

Every covariance matrix satisfies the Heisenberg uncertainty 
principle 7 + i£ > 0. 
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Symplectic transformations fl9ll such as the one corre- 
sponding to the application of the above beam splitters are 
reflected by transformations of the form 

7 — > SjS T (13) 

with S G Sp(2n,B), i.e., SI],S T = £ If the first mo- 
ments vanish, the characteristic function \ '■ K 2 ™ — ► C de- 
fined as x(0 = tr[Wfp] of a Gaussian state p can be written 

as 

m = e -^ym/^ (14 ) 

where the Weyl displacement operator is given by 

W s = exp(i£ T 51R). (15) 

7 is just the above covariance matrix. With this notation, the 
fact that Gaussians in the centre of phase space form fixed 
points becomes straightforward. 

Proposition 1 (Gaussian states are fixed points) Let p be a 

Gaussian two-mode state with vanishing first moments. Then 

£{p®p) = p. 

In fact, this set of fixed points is already exhaustive: there 
are no other fixed points that do not have the property of 
Proposition This is quite a surprise, but a pleasant one, 
as it makes the characterisation of the fixed points very easy: 
the fixed points are exactly the Gaussian states with vanish- 
ing first moments, and there are no other states that are left 
unaffected by the iteration. The proof of this assertion can be 
found in AppendixlAl 

Proposition 2 (All fixed points are Gaussian) Let p be a 

two-mode state satisfying c £(p ® p) = p for some c > 0. 
Then p is a Gaussian state with vanishing first moments. 

The proof of this statement - while being of central inter- 
est for the purposes of this paper - is quite technical and will 
for the sake of readability of the main text be presented in 
AppendixlBl The property stated in Proposition 2 is an inter- 
esting feature of the iteration map: it is a Gaussian map and 
hence maps by definition all Gaussian states onto Gaussian 
states. But even when applied to general two-mode quantum 
states, the only fixed points of the map happen to be Gaus- 
sian states as well. No other state is left unchanged under the 
mixing at the beam splitters followed by the measurement. 



C. Convergence 

Once the fixed points have been specified, the next step is to 
see whether the procedure in fact converges to such a Gaussian 
state with vanishing first moments. So the question is under 
what constraints the procedure converges to a state at all - 
which is then one of the fixed points. We will also characterize 
fully those initial states, pure or mixed, for which convergence 
can be shown to an exactly pure Gaussian state. 



The above protocol is probabilistic, and in the following 
convergence proofs it is assumed that it is successful in each 
step. This is to demonstrate that as a matter of principle, 
this procedure has the power of distilling entangled Gaussian 
states from a supply of non-Gaussian initial states. The closer 
the state approaches the fixed point, the smaller the improve- 
ment in quality in a step of our procedure. As every step 
of the procedure loses at least half of the partially entangled 
pairs that enter the iteration step one has to make a meaning- 
ful choice concerning the accuracy to which the envisioned 
entangled state can be achieved on the one hand and the rate 
with which this is possible on average on the other hand. 

For a p 6 S, where S denotes the state space on 7i <g> 7i, let 
£ (1) (p) be defined as 

SW(p)=£(p®p), (16) 

and 

£ {l+1 \p) = £{£^(p)®£^( P )) (17) 

for i € N. So £t l+1 \p) is nothing than the unnormalized 
outcome of the procedure after i + 1 steps of the iteration. 
The actual states are then 

The next result states when convergence to one of the fixed 
points can be expected. 

To express the result in a concise manner, introduce a useful 
map, B : S — ► Mix 4, which for any state p allows one to 
construct a real symmetric 4x4 matrix B(p), with which we 
will characterize the convergence properties of the protocol. 
The map B can be defined in terms of the matrix elements of 



B(p) as follows: 






B(p) h i = 


^ (-(0-1,0,1,0 - 1) 


+ VZRe(tr 2 ,o,o,o)) 


B{ph,2 = 


^ (-(0-1,0,1,0 - 1) 


- v / 2Re(cr 2 ,o,o,o)) 


B{ph,z = 


2 (-(0-0,1,0,1 - 1) 


+ \/2Re(o-o,2,o,o)) 


B{p)a,a = 


2 (-(0-0,1,0,1 - 1) 


- v / 2Re(cr ,2,o,o)) 


B{ P )l,2 = 


1 

— =Im(<72,o,o,o) 
V2 




B(p)sA = 


— =Im(cro.2.o,o) 
V2 




B(p)i,3 = 


- (-Re(cri,o,o,i) + 


Re(ox 1,0,0)) 


B(p)lA = 


\ ( Im (o-i,o,o,i) +Im(<7i, 1,0,0)) 


#0)2,3 = 


- (-Im(o-i, ,o,i) + 


Im(cri, 1,0,0)) 


#0)2,4 = 


i (-Re(o-i, ,o,i) - 


Re(<Ti, 1,0,0)) 



where we define a = p/po,o,o,o> which is the state p normal- 
ized such that element 0-0,0.0,0 = 1 for states p G S with 
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Po, 0.0,0 = (0, 1 p| 0, 0) > 0. The map is not defined for states 
with po, 0.0,0 = 0, but that has no consequences for this dis- 
cussion. 

For a Gaussian two-mode state p, the 4 x 4-matrix B(p) is 
always invertible, and its covariance matrix is simply 
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E T J B(p)" 1 S + 1 4 . 



(20) 



Proposition 3 (Convergence to Gaussian states) Let p £ S. 

Then there exists a Gaussian two-mode state with vanishing 
first moments u> satisfying 



lim (a,b\ (p (i) -tv) \c,d) = 



(21) 



for all a,b,c,d £ No if and only if both (i) (0,0|£(p 
p)|0, 0) > 0, and (ii) B(p^) is invertible. 



The matrix 



£ T £(p 



(i) 



(22) 



withp' 1 ' = £(p®p) /lx{£ (p<8>p)] is then the covariance matrix 
of the resulting Gaussian state to which the procedure con- 
verges (weakly). In other words, the procedure always con- 
verges to Gaussian two-mode states, whenever there is a non- 
vanishing success probability. The proof of this statement will 
be presented in Appendix Icl The most interesting case is the 
situation where one can prove convergence to an exactly pure 
Gaussian state. This is the case when T, T B(p^)~ 1 I] + I4 is 
the covariance matrix of a pure Gaussian state. In this case, 
however, the necessary and sufficient criteria can be formu- 
lated in a more transparent manner. For imperfect detectors 
one will not achieve this goal exactly. From the perspective of 
the basic understanding of the procedure, however, necessary 
and sufficient conditions for convergence are instructive. 

Proposition 4 (Necessary and sufficient conditions for 
convergence to pure Gaussians) Let p g S. Then there ex- 
ists a pure two-mode Gaussian state centred in phase 
space satisfying 



lim <M| (pW-MM) M)=o 

for all a, b,c,d £ No if and only if (i) po. 0,0,0 > 0, (ii) 



and ( Hi) 



PO, 0,0,0 



Pi, 0,1,0 
Po, 1,0,1 

Pi, 0,0,1 



Pi, 0,0,0 



|pi,o,o,o| 2 /po, 0,0,0, 
|po,i,o,o| 2 /po, 0,0,0, 

|Pl,0,0,o| 2 /PO, 0,0,0; 



(23) 



(24) 
(25) 
(26) 



Pi, 1,0,0 

Po, 0,0,0 



^0, 0,0,0 
Pl,0,0,0p0, 1,0,0 
po, 0,0,0 



Pi, 1,0,0 
Po, 0,0,0 



pi, 0,0, 0P0, 1,0.0 
Po, 0,0,0 



/^PO^O 

Po, 0,0,0 



Pi, 0,0,0 
Po, 0,0,0 



< 1, 



(27) 



The proof of Proposition 4 can be found in Appendix iDl In 
this sense the protocol can also work as a purification pro- 
tocol. Not only the degree of entanglement and squeezing 
are increased, but also the von-Neumann entropy decreased. 
Note, however, that the conditions to convergence to exactly 
pure Gaussian states are fairly restrictive, and one will often 
encounter the situation that the states are almost pure. It can 
also happen that the degree of entanglement is significantly in- 
creased in the course of the procedure, but the von-Neumann 
entropy also increases. 

Such a procedure would - if implemented with perfect 
physical devices - clearly lead to a perfect distillation pro- 
cedure, and moreover, to the possibility of quantum privacy 
amplification for unconditionally secure quantum key distri- 
bution: if the state is a pure state, it cannot be entangled to any 
system of a third party, and the resulting states could be used 
to simply transmit a quantum state encoding the key. Need- 
less to say, one would still have to apply classical methods 
to extract a secure key from the measurement outcomes, as 
the states exhibit only a finite squeezing, and hence, measure- 
ments of canonical coordinates by means of homodyne detec- 
tion do not yield a deterministic outcome. This is, however, 
then entirely due to the Gaussian character of the quantum 
state and not due to an eavesdropper. 

Note that the second moments of the states do not remain 
constant during this procedure, as they are modified in the 
steps involving measurements. For example, the only states 
with the second moments of a Gaussian pure state is a Gaus- 
sian state itself. Hence, the 'Gaussification' of the states is 
not merely a mixing to a Gaussian state, by virtue of the law 
of large numbers. 



D. Examples 

We will now turn to discussing a number of examples to 
visualize the procedure. For a number of initial states we will 
discuss the degree of entanglement after a single step and 
compare it with the degree of entanglement of the Gaussian 
state the sequence of states converges to. We start by giving 
an example for pure states, and then turn to mixed initial 
states. 



Example 1: Let p G S be the (pure) state with 

Po,o,o,o = 1/(1 + e 2 ), 

Pi, 1,0,0 = Po, 0,1,1 = e/(l + e 2 ), 

Pi, 1,1,1 = e 2 /{l + e 2 ), 



(28) 



with e £ [0, 1), and p a ,b,c,d = with a, b,c,d £ N other- 
wise. The sequence of outputs converges to a Gaussian pure 
state, the covariance matrix of which can be evaluated accord- 
ing to Proposition|3] Depending on the value of e, the degree 
of entanglement that can be achieved will be different. This 
degree of entanglement will now and in the following be quan- 
tified in terms of the logarithmic negativity l2Cfl . which is for 
a state p of a bi-partite system defined as 



where 



denotes the spectral norm. 



E N {p) = log 2 ||p r 



(29) 
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where ||.|| i de notes the trace-norm, and p T is the partial trans- 
pose of p II21I1 . The negativity has been shown to be monotone 
under local operations with classical communication ll25H23l . 
The logarithmic negativity is an upper bound for the distill- 
able entanglement, grasping the resource character of entan- 
glement. For Gaussian states, as we encounter here, the log- 
arithmic negativity has moreover a clearcut physical interpre- 
tation in terms of an asymptotic cost function ll27ll . For the 
specific initial state as in Eq. d28i . Fig.|2]displays the behav- 
ior the logarithmic negativity of the initial state p, and of the 
Gaussian state the sequence of states converges to as a func- 
tion of £ G [0, 1). Note that the corresponding expressions 
can be evaluated analytically, by virtue of Proposition|5] 

For e — ► 1 the logarithmic negativity of the resulting Gaus- 
sian state diverges, which reflects the fact that with unit de- 
tection efficiencies, one could in principle prepare arbitrarily 
entangled and squeezed states in this manner. This holds, as 
should be noted, also in the single-mode case, and one may 
prepare states with an arbitrary degree of single-mode squeez- 
ing. Technical limitations, however, will limit the degree of 
squeezing that is actually attainable, as will be discussed later. 
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FIG. 3: The logarithmic negativity of the resulting states for initial 
states p as in Eq. 1301 . Again, the straight line shows the negativity 
of the Gaussian state the sequence converges to, with diverging log- 
arithmic negativity as e approaches zero. The dashed line represents 
the logarithmic negativity after a single step, whereas the dotted line 
is the logarithmic negativity of the original state. 
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FIG. 4: As Fig.|3|for the initial state as in Eq. <3 1 1 . 



FIG. 2: The logarithmic negativity of the resulting states for an ini- 
tial state p as specified in Eq. I28i . Depicted is the logarithmic nega- 
tivity of the Gaussian state the sequence converges to (straight line), 
i.e., the degree of entanglement after 'infinitely many steps', (ii) of 
the output state after a single iteration of the protocol (dashed line), 
and (iii) of the initial state p itself (dotted line). Note that the in- 
crease of entanglement is already significant in a single step of the 
procedure. For infinitely many iterations and e — > 1 the degree of 
entanglement diverges. 

Example 2: As another example, let us consider the state 
p G S with 

Po, 0,0,0 = Pi, 1,0,0 = Po, 0,1,1 — Pi, 1,1,1 

= 1/(2 + e), (30) 
Po,i,o,i = e/(2 + e) 

with e G [0, 00), and p a ,b,c,d = otherwise. This state is 
mixed for all values e G (0, 00). Fig.|3]depicts again the value 
of the logarithmic negativity of the initial state, after a single 
iteration step and after 'infinitely many' iterations. 
Example 3: The third example is p G S with 

Po.0,0,0 = 1/(1 + e 2 ), Pi, 1,0.0 = Po,o,i,i = e/(2 + 2e 2 ) 
Pi,i,i,i = e 2 /{l + e 2 ) (31) 



with e G [0, 1), and p a .b.c.d = otherwise. Again, we depict 
the degree of entanglement in Fig. 0] This is a set of initial 
states for which exact convergence to a pure Gaussian state 
is guaranteed by Proposition |4] for all values of e. In Fig. [5] 
the von-Neumann entropy S(w) = — tr[w log 2 ui] for states 
uj is displayed, again as a function of e, characterizing the 
purity of the resulting states. Note that the state does not only 
become more entangled, but also less mixed in the course of 
the protocol. 

Example 4: As a mere graphical illustration of the proce- 
dure we represent the states that are encountered in the pro- 
cedure in phase space. More specifically, for the initial state 
p as in Example 1 with e = 0.6 we investigate the Wigner 
function of the single-mode states of the reduced state of one 
mode alone for the initial state, and the state after one and two 
steps. The Wigner function W : M 2 — > 1R is the Fourier 
transform of the characteristic function, 

W(0 = / e^xWij. (32) 

Fig. [6] shows the Wigner function of tr^[p], trs[p < ' 1 ' ) ], and 
fr-B[p ]■ While initially, the Wigner function is far from be- 
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FIG. 5: This figure depicts the von-Neumann entropy of the out- 
put as a function of £ £ [0, 1), for the initial state as in Eq. 03- 
The dotted line corresponds to the initial state itself, and the dashed 
lines show the von-Neumann entropy after one (dashed), two (dashed 
with longer dashing), and four steps (solid line). The limiting von- 
Neumann entropy vanishes exactly, as the conditions for Proposition 
|4]are met. Note that for very mixed initial states the von-Neumann 
entropy can first increase, to then decrease again in further steps. 

ing a Gaussian in phase space, its non-Gaussian features dis- 
appear quickly. 

E. Achievable squeezing 

Another relevant figure is the degree of two-mode squeez- 
ing that one can achieve. For a Gaussian state p with covari- 
ance matrix 7, one of the standard definitions for the degree of 
squeezing translates into the language of covariance matrices 
to 

E s (p) = max{-logA min (7),0} (33) 

where A m i n denotes the smallest eigenvalue. Roughly speak- 
ing, one compares the variance with respect to some canonical 
coordinate of this state with the one of the vacuum. For ex- 
ample, for the two-mode squeezed state p with a covariance 
matrix of the form (1381 with 

£ = cosh(2r), C = sinh(2r), (34) 

r G [0, 00) being the ordinary two-mode squeezing parame- 
ter, we arrive at Eg(p) = r. In terms of dB, the degree of 
squeezing is related to Es{p) according to 2Es(p)/ log(10). 
For a two-mode state, this gives the total degree of squeez- 
ing. To distinguish genuine two-mode squeezing from locally 
available single-mode squeezing, one may consider for a two- 
mode state with 4x4 covariance matrix of the block form 




FIG. 6: The Wigner function of the reduced state of one system 
initially and after one and two steps for the initial state as in Eq. <28t . 

where Sa, Sb G Sp(2, R) are chosen in such a way such that 

S AlA S T A =al 2 , Sb1bS t b = /31 a (37) 

with a, (3 > 1, and SaIcS^ is diagonal. This is the de- 
gree of squeezing after the state has been locally brought to 
a form corresponding to a Gibbs state with appropriate local 
symplectic transformations (that can in particular include also 
single-mode squeezing). 



the quantity 

Ersip) = max 



1A 1C 
1C IB 



(35) IV. PREPARATORY STEP 



{- log x mm ((SA e s B h(s A © s B f), 0} 



The above procedure takes non-Gaussian states as input. 
If one starts off with a Gaussian state, a preparatory step is 
clearly necessary. Such a step has been described in Ref. 0]. 
(36) In principle, any other protocol preparing the states that are 
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FIG. 7: The preparatory step which resembles very much the step 
of an iteration in the Gaussification scheme. Given two specimens 
of two-mode squeezed states, measurements are performed on two 
of the four modes. However, now the outcome is accepted in case 
that both detectors click, corresponding to the Kraus operators E2 = 
1 — |0}(0|. The beam splitter V is not a 50 : 50 beam splitter, but 
one that has an appropriately tuned reflectivity and transmittivity. 

suitable in the above procedure would be appropriate as well. 
The one presented here has the advantage that it does not leave 
the scope of the paper, in that only the possibility of preparing 
Gaussian states is assumed, and the use of dichotomic photon 
detectors with high efficiency, which do not resolve the photon 
number. 



weakly entangled mixed states. The decoherence dynamics 
we are interested in, i.e., transmission through an absorbing 
fiber, does not alter the Gaussian character of the state l29ll . 
and it acts in effect as a Gaussian channel l30ll . We assume 
that both modes are affected in the same manner. 

Starting from the two-mode state with covariance matrix 
7 as in Eq. J38i . the state after the decoherence process is a 
Gaussian state with a covariance matrix of the same simple 
form, but with the roles of £ and £ being replaced by 

C . — , 1 + f? 2 (^ - 1), C^e 2 (, (39) 

6 £ [0, 1] specifying the strength of the decoherence process. 
The value 8 = 1 corresponds to no losses at all. It is a tedious 
but straightforward calculation to show (compare, e.g., Ref. 
lEsTl - ) that for each value of 9, one can find a choice for £ and 
the transmittivity T and reflectivity R such that the resulting 
state becomes arbitrarily close in trace-norm to p £ S with 

Po,o,o,o = 1/(1 + A 2 e + A 2 ), (40) 

Pi, 1,0,0 = Po, 0,1,1 = Apo, 0,0,0, (41) 

Pi, 1,1,1 = A 2 ^, 0,0,0, (42) 

Po, 1,0,1 = £A 2 po, 0,0,0, (43) 

with 



A. The preparation procedure 

Let us assume that one has two-mode squeezed states at 
hand, which are Gaussian states the covariance matrix of 
which is of the form 



(i-e 2 )/e\ 



(44) 



/£ c 
£ -c 
C i 

V -c £ 



(38) 



where £ 2 = £ 2 — 1, £ £ (0, 00]. The numbers £, ( character- 
ize the degree of two-mode squeezing, as in Eq. J34t , It has 
been shown in Ref. [6] that with the procedure as in Fig. 1101 
with the appropriate choice for £ and for the transmittivity T 
and reflectivity R of the beam splitter V, the resulting mixed 
two-mode state can be made arbitrarily close in trace-norm 
to a maximally entangled state in the subspace isomorphic to 
(D 2 <g> (D 2 with state vector |0,0) + A|l,l)/(1 + A 2 ) 1 / 2 for 
any value of A £ [0, 1). This state can be used as input of the 
procedure. Taking this as input of the procedure of SectionllTI 
the sequence of states will converge to a pure state with an ar- 
bitrarily large degree of entanglement, as well as an arbitrary 
degree of two-mode squeezing. 



and p a ,b.c.d = otherwise. Any value for the number 
A £ [0, 1] can be achieved. For A = 1 this is nothing but 
the state of Example 2 given in Eq. (I30i . The negativity after 
a number of steps of the Gaussification protocol for this initial 
state has already been depicted in Fig. [3] If one implements 
the full procedure, including the preparatory step and one or 
several instances of the whole procedure, it is certainly the rel- 
evant figure to compare the resulting degree of entanglement 
with the one before even the preparatory step has been taken. 
However, the initial two-mode squeezed states that have to be 
transmitted before the preparatory step has a negligible degree 
of entanglement: in order to better and better approximate the 
state of the form as in Eq. i3Q\ . less and less entanglement 
is needed, at the expense that the achievable rate decreases. 
Therefore, in principle, with perfect detection efficiencies as 
considered in this section, one can encounter an arbitrarily 
large entanglement gain. Also, note that the largest increase in 
entanglement per step occurs already in the preparatory step 
- this is specific for this case of perfect detectors. Figs.|8]and 
|9]show the degree of squeezing and entanglement that can be 
asymptotically achieved as a function of A for several values 
of6>£ [0,1]. 



B. The full protocol under decoherence 

Yet, such states are not available in the presence of a deco- 
herence process. Once locally prepared, two-mode squeezed 
states or other entangled Gaussian states will deteriorate into 



V. IMPERFECT DEVICES 

Until now, it was assumed that the devices that are being 
used are noiseless and error free. We have seen that with 
such devices, distillation to highly entangled Gaussian states 
is indeed possible. This is the continuous-variable analogue to 
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FIG. 8: The degree of two-mode squeezing for the Gaussian to 
which convergence is encountered, as a function of A £ [0, 1), for 
9 = 1 (solid line), = 0.9 (dashed line), and 9 = 0.8 (dotted line). 
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FIG. 9: As Fig. [8] but for the degree of entanglement in terms of the 
achievable logarithmic negativity. 



quantum privacy amplification in the finite-dimensional case. 
In any practical realization of such a scheme, however - just 
as in the case of finite systems such as qubits - the perfor- 
mance of the scheme depends very much on to what accuracy 
the operations can be performed. The most important number 
here is the detector efficiency of the photon detectors. 

Needless to say, there are other potential sources of error: 
there is no intrinsic need for storing light in fiber loops, but 
nevertheless, losses even in short fibers cannot be avoided. If 
the scheme is not implemented entirely within fibers, losses 
are due to the coupling into the fiber. Then, in the entire pa- 
per we have discussed single modes only, and not broadband 
squeezed states In a practical realization, mode-matching 
problems will occur. Finally, dark counts of the photon de- 
tectors must be included in the treatment: here, however, it 
turns out that dark counts are much less problematic as one 
is tempted to think on intuitive grounds. Firstly, in the Gaus- 
sification step the only effect of dark counts is that one acci- 
dently does not accept the resulting state. This merely leads 
to a reduced rate of production of entangled states, but does 
not result in an increase of noise in the outputs. As the whole 
protocol is assumed to be implemented with a high repetition 



FIG. 10: A single step of the protocol for detection efficiencies 
smaller than one. The detection efficiency less than unity is incor- 
porated by placing perfect detectors behind a beam splitter. 

rate, this reduction of rate is acceptable. In the preparatory 
step dark counts do play a role. But even here, as the prepa- 
ration requires a coincidence of several or many detectors in 
a very short time window (four in the simplest case), the dark 
count rate can in principle be made arbitrarily small. These 
further sources of errors will be discussed in a forthcoming 
paper. As has been pointed out in the introduction, in this pa- 
per, we concentrate on the most crucial source of error, the 
non-unit detection efficiency. 

A. The iteration map 

The case of imperfect detectors is modeled as follows, the 
usual projection operator onto the number state |n)(n| is re- 
placed by 

WH — E [ U n (l-v) k - n \k)(k\, (45) 

k=n ^ ' 

with r\ E [0, 1]. This formula has a representation in terms of 
a beam-splitter of transmittivity T = y/rj placed in front of a 
detector with unit efficiency (see, e.g., Ref. l3llo . As before, 
let p be some trace-class two-mode positive operator, i.e., a 
not necessarily normalized two-mode state. In the Fock basis, 
it can be represented as in Eq. 0. The resulting p' after one 
step of the procedure, 

p' = E T {p®p), (46) 

where £ is replaced by the map £t reflecting non-unit effi- 
ciency, can then be written as 

oo 

P = E P's,t;n,m\ S i t )( n > m \- ( 47 ) 
s,t,n,m=0 

The new coefficients can be evaluated to be given by 

oo A+kB+lC+kD+l 

p'a, B ;c, d = E E E E E («) 

k,l=0 a=Q 6=0 c=0 d=0 
min{a,&} min{6,2} min{e,&} mm{cZ,Z} 

x E E E E 

s=0 u=0 s'=0 u'=0 
X iV A,B,C,D Pa,b;c,d PA+k-a,B+l-b,C+k-c,D+l-d, 
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where 



AT a,b,c,d,s,u,s' ' ,u' _ r)-(A+B+C+D+2k+2l)/2 
^A,B,C,D — A 



x /_]\A—a+B—b+C-c+D-d+s+1i+s'+u' 

'a\ (k\(A + k-a\f A 
, s ) W V k ~ s ) \ a - s 

'b\ n\ (B + i-b\ ( b 

^uj\u)\ l — u ) \b — u 
'c\fk\fC + k-c\f C 

'd\n\(D + l-d\( D 
,w)\u')\ l-u' )[d-u 



(l- V ) k+l 

1/2 



1/2 



1/2 



1/2 



(49) 



The case f] = 1 describes a detector with unit efficiency, and 
this expression reduces to the one described above. 
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FIG. 11: The logarithmic negativity as a function of rj £ [0, 1] after 
one and after ten steps of the procedure, for the initial state as in Ex- 
ample 1 with s = 0.7. The dashed line is the logarithmic negativity 
after a single step of the procedure, the dotted line corresponds to 
two steps. The solid line represents the logarithmic negativity of the 
initial state prior to the implementation of the procedure. 



B. Examples 

The issue here is to what extent the noise introduced by 
imperfect photon detectors is harmful to the functioning 
of the protocol. Very low detection efficiencies obviously 
render the protocol less effective. Then, in each step of the 
iteration more entanglement is lost than concentrated. In 
turns out, however, that it is not necessary to have detectors 
with efficiencies very close to unity. Instead, with efficiencies 
that are achievable with present avalanche photodiodes, the 
degree of entanglement can in fact be increased in the actual 
Gaussification step. Astonishingly, for a small number of 
iterations of the protocol, the efficiency does not have to be 
particularly high at all, as the subsequent cases will exemplify. 
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FIG. 12: As Fig. 1111 but for the initial state as in Example 1 for 
£ = 0.95. 



Example 5: To demonstrate the performance of the proce- 
dure with detectors of non-unit efficiency, we have computed 
the logarithmic negativity for the initial state of Example 1 
for e = 0.7 after one step and two steps of the iteration, as a 
function of 77 € [0, 1], see Fig. ^2 Fig. I12ldepicts the loga- 
rithmic negativity for e = 0.95. The value for the initial state 
is related to the choice for the reflectivities and the degree of 
two-mode squeezing in the preparatory step. Note that for 
two steps of the procedure and 80% detection efficiency, the 
degree of entanglement is almost doubled. 

It becomes clear from these figures that in these instances, 
even fairly low detection efficiencies render the protocol very 
effective. Surprisingly, for a single step, any detection effi- 
ciency is accompanied with an increase of entanglement, even 
for very low ones. This is due to the fact that already without 
measurement, no entanglement is lost, due to the particular 
structure of the initial state. Whenever the detection efficiency 
is larger than zero, the distillation protocol does work. For a 
larger number of steps, more and more increase of entangle- 
ment is to be expected for high detection efficiencies, while 
the procedure becomes more and more sensitive with respect 
to imperfect detectors. Nevertheless, the scheme seems aston- 
ishingly robust with respect to imperfections in the detectors 



for a small number of steps. In fact, realistic detection effi- 
ciencies available with present technology are sufficient for 
the functioning of the scheme. 

Note that the biggest increase in entanglement per step 
will follow the preparatory step as described in Section HVl 
The Gaussification steps in turn will let the state become 
Gaussian to arbitrary approximation. The capabilities to 
serve as a quantum privacy amplification scheme even in the 
case of noisy apparata |01 resulting from non-unit detection 
efficiencies will be discussed in a forthcoming publication. 



VI. SUMMARY AND DISCUSSION 

In this paper we have presented a scheme for distill- 
ing mixed-state continuous-variable entanglement that only 
makes use of operations that are accessible in optical systems. 
This scheme, the Gaussification scheme applied to mixed 
states, is an iterative procedure, in each step of which modes 
are brought to interference and are measured using photon de- 
tectors that distinguish between the presence and the absence 
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of a photon. There is no essential need for storing the light 
in fibers or for mapping the state of light to atomic degrees 
of freedom. It is after all worth noting that the same scheme, 
when applied to single-mode systems instead of a two-mode 
system, would serve as a procedure to prepare single-mode 
squeezed states of light. The squeezing would then be en- 
tirely due to the measurements performed in the course of the 
procedure. 

This distillation scheme is on the one hand meant to be a 
quantum optical scheme that is close to what can be achieved 
with present technology. On the other hand, it is interesting in 
its own right from the perspective of the theory of quantum en- 
tanglement. It shows that entanglement concentration is pos- 
sible from Gaussian to arbitrarily perfect Gaussian states, yet, 
to achieve this goal, a single non-Gaussian preparatory step 
is necessary. The rest of the procedure can rely on Gaussian 
operations, which nevertheless change the second moments. 

We have presented in this paper in detail formal state- 
ments concerning the weak convergence to Gaussian two- 
mode states. With several examples we have illustrated the 
properties of the procedure, and we have discussed the degree 
of entanglement and squeezing that are to be expected. The 
understanding of the asymptotic behavior is important from 
the entanglement theory points of view. In a practical reali- 
sation, in turn, one would be interested in a powerful scheme 
where a few steps or a single step already achieve the desired 
goal. A crucial limitation in a practical quantum optical im- 
plementation is the non-unit detector efficiency. We have dis- 
cussed the constraints in achievable entanglement and squeez- 
ing that are inherited by these limitations. Other limitations in 
a scheme consisting of a preparatory step and a single step of 
the Gaussification scheme - and the performance of protocols 
with intermediate quantum repeater devices - will be investi- 
gated in all detail in forthcoming work. 

In the proposed protocol, neither controlled-not operations 
nor photon counters where different photon numbers corre- 
spond to different classical signals are required. The techno- 
logical challenges that have to be overcome in the present pro- 
posal are inequivalent to the ones encountered in the known 
schemes in the finite-dimensional setting. After all, it is the 
hope that the present paper can contribute in a significant man- 
ner to the debate of how to distribute entanglement over arbi- 
trary distances in the presence of noise. 
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APPENDIX A: PROOF OF PROPOSITION 1 

This follows immediately from the fact that the beam split- 
ters are reflected by the S G Sp(8, R) given by 



q = J_f U U 
y/2\U ~U 



(Al) 



This is the representation of the beam splitter with the same 
phase convention as above. If the first moments d are initially 
zero, they are also vanishing in later steps, as the vector of 
resulting first moments after the first step is given by dl = 
(S © S)d = 0. Let 7 be the covariance matrix of p, then 



S t {j®j)S = 7® 7. 



Hence, £(p ® p) = p holds. 



(A2) 



□ 



APPENDIX B: PROOF OF PROPOSITION 2 

The statement that has to be proven is that except from 
centered Gaussians no other two-mode states p exist with the 
property that p = c £(/?<g> p). Before we will proceed with the 
proof, we set the notation. Let us from now on denote the set 
of trace-class operators on H <E)H with T, where TC = £ 2 (R). 
The entire state space will be denoted by S. The set of trace- 
class operators a with (0, 0|cr|0, 0) = <7o, 0.0,0 = 1 will t> e 
referred to as M . Furthermore, we introduce the set of cen- 
tered two-mode Gaussians Q C T by 

g = lp : p = J d^e'^^^W-t, A>0, real j , 

(Bl) 
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which includes also the two-mode Gaussians with vanishing 
first moments with sub-Heisenberg variance. These Gaussians 
with sub-Heisenberg variance, meaning that A + ffi is not a 
positive matrix, correspond to elements of T which are not 
positive and hence not states. The task is to show that for each 
p G S for which there exists a c > such that 



p = c£(p ® p) 



(B2) 



it follows that p G g. 

The first step is to consider p G T that are the solutions of 
Eq. dB2l with some c > in the number basis. For simplic- 
ity, let us fix normalization by considering a = p/po, 0,0.0 = 
pj (0, 1 yo| , 0), which are the solutions of a = £(<r <g> a). The 
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relevant observation is that for any i, j, k, I G No, the number 



Vi,j,k,t = (hjW\ k > 1 ) 
is a polynomial of degree 

D < max{i, j, k, 1} 

in the complex numbers 

Cl, 0,1,0, Co, 1,0,1, Cl, 0,0,1, 
C2, 0,0,0, Co, 2, 0,0, Cl, 1,0,0- 



(B3) 



(B4) 



(B5) 
(B6) 



This can be proven by induction, on using the above map Eq. 
in terms of the number basis. For o»,j,fc,i with i, j, k, I < 
2 this can be seen by direct inspection. Then, assume that 
the above statement is true for all (Jij.k.i with k,l < m 
for some m > 2. One can then consider first c m +i.o,o.o, to 
immediately find that 



7 m+l, 0,0,0 



Cjtj+1,0,0,0 
2 -(m+X)/2 ^_ 



1 



1) + r, (B7) 



where r is a polynomial in the entries of B. Similarly, one can 
proceed by showing that the statement is true for all cri,j,k,l 
with i,j,k,l < m+ 1, which is the induction step l32Tl . This 
means that the set of p G T that satisfy the above fixed-point 
condition Eq. (IB2I gives rise to a ten-dimensional manifold - 
just as the set of centered Gaussians. The remainder of the 
proof is merely concerned with showing that indeed, any such 
fixed point is nothing but a centered Gaussian. 

Equivalently, <Tij,k.i is a polynomial of degree D in the en- 
tries of a real symmetric matrix 4 x 4-matrix B, by setting 



ci, 0,1,0 
Co, 1,0,1 
ci, o,o,i 

C2, 0,0,0 
Co, 2, 0,0 

ci. 1,0,0 



1 — Bi t \ — B 2 , 2 , 

1 — #3,3 — -£"4,4, 

— -Bi,3 — B 2 a + i{B\A — -82,3) 
2- 1 / 2 (B hl - B 2 . 2 + 2iB h2 ), 
2-^ 2 (B 3 ^-B iA + 2zB 3A ), 

Bl,3 — B 2 A + «(£>!, 4 + #2,3). 



(B8) 



This particular choice will be motivated below. As the affine 
map (IB8> is invertible, each a G Af that is the solution of 
Eq. JB2i is up to normalization uniquely characterized by the 
entries of a real symmetric 4 x 4-matrix B. This gives rise to 
a map 



F : N 



Ma 



(B9) 



where Mi X i denotes the set of real symmetric 4 x 4-matrices. 
F is a bijection relating M and F{N) C Af 4x4 . 

Let Czix4 C M 4x4 be the set of real symmetric 4x4- 
matrices B for which a = F^ 1 (B) is moreover positive, a > 
0. As any centered Gaussian 



-£ T £ T y4££/4 



W- 



(B10) 



with A > satisfies p = £(p(£)p), there clearly exists a matrix 
B G C 4x4 with 

p/po,o,o,o = F~ 1 (B). (Bll) 

This matrix B can be identified as being given by 

B = (A+1 4 )- 1 . (B12) 

This can be seen as follows: The number po, 0.0,0 can be ex- 
pressed as 



Po, 0,0,0 



^ J Acxp(-e T S T ASC/4)(0,0|^|0,0) 

J d 4 £ex P (-£ T £ T (A+l 4 )££/4) 
(2/|A+l 4 |) 1/2 = \2B\^ 2 , 



(B13) 



where |.| denotes the determinant. Setting again a = 
p/ Po, 0,0,0 for P as m Eq. (IB10> . on using the CCR for Weyl 
operators, one arrives after a few steps at 



Co, 1,0,1 



Aexp(-e T S T ASe/4) 



x fe 2 +e 4 2 )/2, 



(B14) 



that is, (70,1,0,1 = 1 — {B3.3 + i? 4 , 4 )/2. In the same way one 
finds that Eqs. dB8i hold, and hence at F~ 1 (B) = p/po,o.o,o- 
What remains to be shown is that for any B G C 4X 4 there 
exists an A > with B = (A+ I4) -1 . Such an A can always 
be found if it is true that for any B G C 4X 4 



B<t i; \B\^0. 



(B15) 



This is indeed the case: if|S| = 0, then (0, 0|F _1 (S)|0, 0) = 
0, and hence, F~ 1 {B) ^ Af. If B < 1 4 , we can with- 
out loss of generality assume that B\,\ > 1 (which is al- 
ways achievable with an appropriate basis change). Then 
(1,0\F- 1 (B)\1,0) < 0, and hence, F" 1 ^) ^ Af. So 
we arrive at the conclusion that any (unnormalized state) 
F~ 1 (B) G N with B e C 4 x4 can be realised as a centred 
Gaussian. Hence, we can conclude that there are no non- 
Gaussian fixed points, which was the statement that had to 

□ 



be shown. 



APPENDIX C: PROOF OF PROPOSITION 3 

1, The first 



Let us assume that (0, 0\p\0, 0) 
observation is that 



Po, 0,0,0 



(i) 
Pi, 0,1,0 


-P (1) 

~ ^1, 0,1,0' 


0) 
Po, 1,0,1 


-p {1) 

~ Po, 1,0,1' 


(Cl) 


Pi, 0,0,1 


-o {1) 

~ Pi, 0,0,1' 


(*) 
Pi, 0,0,0 


- o {1) 

~ P2, 0,0,0' 


(C2) 


Po,2,0,0 


— Po,2,0,0' 


(0 
Pi, 1,0,0 


— Pi, 1,0,0' 


(C3) 



for alH > 1. In other words, these numbers change only in the 
first step, but not in further steps. This is an immediate con- 
sequence of the iteration map £ as in Eq. (|9}. The coefficients 
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Pi, o,i,0' Po, i,o,i' Pi, o,o,i' Pi, o,o,0' Po,2,o,0' Pi, 1,0,0 specify the 
resulting second moments of the state according to F(p^'). 
The matrix of the affine map in Eq. dl9t is the inverse of the 
map Eq. (IB8t . By induction, it can be shown that each p^ b c d 

for a, b,c,d G No converges pointwise to (a, b\F(p^)\c, d) 
as i — > oo. F(p^') is a positive trace-class operator, if and 
only if the second moments of the resulting Gaussian satisfy 
the Heisenberg uncertainty relation. rj 



holds. This is the first requirement that emerges if one requires 
exact convergence to a pure Gaussian state. In just the same 
manner one can first conclude that 

lim a£\ o x = 0, lim<7^ 001 = (D8) 

% — >oo ' ' ' i — >oc ' ' ' 

must hold, and therefore, 

co,i,o,i = |oo,i,o,o| 2 , °Xo,o,i = |ci,o,o,o| • (D9) 



APPENDIX D: PROOF OF PROPOSITION 4 



In order to proceed, let us take a' = p'/p'q o o as input and 
starting point. It has the property that 



The starting point is the observation that any two-mode 
pure Gaussian state 



MM 



;n.m \s,t)(n,m\ (Dl) 



s.t,n.m— 



with vanishing first moments has the property that W\ ,0,1,0 = 
0. One way to see this is as follows: On the level of covari- 
ance matrices, and pure two-mode covariance matrix can be 
decomposed into 



7 = ODO 1 



(D2) 



where D = diag(di,l/di,d 2 ,l/d 2 ), di,d 2 € R + , and 
O G Sp(4, R) n SO(4). Written in terms of state vectors 
one obtains 



U(S(di)®S(d 2 ))\0,0), 



(D3) 



where U is the unitary representing the passive transformation 
O, and S(di) and S(d 2 ) denote the single-mode squeezing 
operators. Representing this in terms of creation and annihi- 
lation operators, one arrives at the above property. Hence, the 
above property enforces that 



Pi, 0,1,0 



as i — > oo 



(D4) 



must necessarily hold. Let us again consider a = p/po,o,o,o> 
and 



a' = 8{a®a)= ]T a' st . r 



,t)(n,; 



s,£,n,m— 



be the positive operator after the first step. Then 



"l, 0,1,0 — ""l, 0,1,0 — O"l,0,0,0C0,0,l,0- 



(D5) 



(D6) 



We have that a[ o = l .o,i,o f° r a ^ initial two-mode 

tracece-class operators a with <7o,o,o,o = 1> as follows from 
the iteration map. Therefore, it is clear that Eq. JD4> can only 
be true if already 



01,0,1,0 — ci, o,o.oco, 0,1,0 — |ci, 0,0,0^ 



(D7) 



'0. 0,0.0 



"0,1,0,1 = ^,0,0,1 = 0. ( D1 °) 
1. (Dll) 



According to Proposition 3, to which final state the proce- 
dure converges to is only dependent on the numbers a[ 100 , 

02 0' an d 0p,2 o o- Hence, the question whether pW satis- 
fying Eq. ( IDlOi converges to an element in S as i — > oo is 
equivalent to asking whether 



£W(|$M)/tr[£W(|0M)] 



(D12) 



with state vector 



|^) =/3 2j o|2,0)+/3o, 2 |0,2)+A,i|1,1) + |0,0) (D13) 

converges to an element in S. This question, in turn, has been 
answered in Ref. On using the results of Proposition 4 in 
Ref. 0], one arrives at necessary and sufficient conditions for 
convergence of unnormalized states satisfying Eq. (ID10I is 



y/2a. 



2,0,0,0 



1,1,0,0 



V2a' , 



< 1, 



(D14) 



where 1 1 . 1 1 oo denotes the spectral norm. To see what Eq. ( ID14I > 
reflects in the first step, one has to apply the iteration map, 
giving rise to the condition for the initial state p, 



/q P2. 0,0.0 Pi, 0,0,0 Pi, 1,0,0 



P0, 0,0,0 Po, 0,0,0 PO, 0,0,0 

Pi, 1,0,0 Pi, 0,0, OPO, 1,0,0 ^/q PO.2,0,0 



Pi, 0,0, opo, 1,0.0 
PO, 0,0.0 



PO, 0,0,0 



PO, 0,0,0 



PO, 0,0,0 



Pi, 0.0,0 
Po, 0,0,0 



< 1. 

(D15) 



Combining Eq. ID 151 with Eqs. JD7> . dD9i yields the above 
necessary and sufficient conditions for convergence to a pure 
centred two-mode Gaussian. Note that the convergence is 
meant in the sense of weak convergence, and not in the norm 
sense. rj 
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